Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/5XnuoVVa5Tdqfg4CVxwPdqMFUnQ.roa
File: 5XnuoVVa5Tdqfg4CVxwPdqMFUnQ.roa (raw, json)
Hash identifier: lzrKVbQD0yFkBAeuhL9t48y7SsyuBSjf0RfmCPeX9AQ=
Subject key identifier: E5:79:EE:A1:55:5A:E5:37:6A:7E:0E:02:57:1C:0F:76:A3:05:52:74
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 018CC6B8013AF12F99796C5E8FDA597AB50A
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/5XnuoVVa5Tdqfg4CVxwPdqMFUnQ.roa
Signing time: Mon 01 Jan 2024 20:29:56 +0000
ROA not before: Mon 01 Jan 2024 20:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29405
IP address blocks: 185.152.28.0/22 maxlen: 22
2a07:7d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 19:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:01:3a:f1:2f:99:79:6c:5e:8f:da:59:7a:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Jan 1 20:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e579eea1555ae5376a7e0e02571c0f76a3055274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:5d:21:aa:3f:63:5b:c2:dc:a9:d6:78:f2:
82:73:c9:26:6b:5a:bf:58:f1:be:da:b5:ec:ff:f0:
05:c4:87:16:e0:c3:85:79:18:e9:43:a4:f0:ee:57:
9f:07:91:53:a1:bc:20:d9:5e:c5:f0:9f:0b:53:8c:
97:72:3b:a9:3f:03:f1:b8:f6:8f:10:4c:6e:64:58:
72:6f:44:0e:40:05:cc:ad:0a:b7:be:d3:0b:15:10:
8e:fa:ad:16:e9:98:a6:b0:ca:f1:33:d6:1d:b2:1c:
31:bb:49:24:b3:71:88:dc:3e:4e:0e:8c:17:bf:02:
65:ac:a4:95:03:d7:61:fb:14:ad:e7:8a:b8:48:f1:
f7:d7:06:14:0e:3a:a7:f3:ba:7f:9a:f3:22:40:a4:
73:0c:93:8d:ed:48:24:c6:96:5a:2a:5a:4f:4d:9a:
dd:84:d7:5b:aa:08:d9:f3:74:47:d5:f3:b0:f6:3a:
ed:71:71:0e:04:3b:f2:58:69:ad:5e:77:e2:9f:a9:
59:89:45:fe:e5:12:34:1a:39:d0:c6:f7:56:2b:1b:
82:08:fb:e2:2e:2e:e8:c1:80:75:23:14:22:24:c3:
7b:a1:0e:4a:20:61:7e:f8:c5:d4:5d:c2:30:ee:e9:
42:a8:f6:08:40:b9:21:11:f0:2a:f0:cd:be:c8:e2:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:EE:A1:55:5A:E5:37:6A:7E:0E:02:57:1C:0F:76:A3:05:52:74
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/5XnuoVVa5Tdqfg4CVxwPdqMFUnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.28.0/22
IPv6:
2a07:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
02:a9:7c:45:a7:31:d1:a0:74:c4:24:22:ba:ab:f3:5e:93:e5:
27:36:38:ed:13:3d:56:99:1b:8c:f9:be:50:99:da:5d:a6:80:
37:bc:b6:7f:65:63:17:39:56:d7:df:fc:fc:82:12:b6:c8:c8:
83:3a:4e:fb:14:cc:d3:f3:8d:6d:71:2c:d9:c4:72:53:26:a8:
67:17:91:4f:68:6e:e6:a9:c0:db:9a:2a:6c:d5:d8:14:4a:4f:
c4:b3:87:8b:0c:f4:95:64:74:8f:f6:56:2b:6b:3a:42:af:0f:
cd:f9:4c:ed:7e:62:fc:47:ba:48:f6:2b:9d:3a:cf:42:95:fb:
43:0b:13:fa:45:13:5f:3f:c9:c0:d9:65:9b:26:33:35:f3:37:
e8:49:5a:27:8d:5a:cd:5e:be:7f:7b:6c:92:de:2a:06:5e:fa:
9f:87:1c:34:99:1c:1c:27:8e:ec:68:4b:ab:90:32:96:bd:ae:
34:88:7b:94:12:8f:6d:7d:81:cd:b6:41:83:f9:01:8e:1e:e9:
3d:ff:49:27:d6:66:65:3e:e6:2c:f6:1f:0f:86:9a:18:8c:18:
b6:f2:56:fd:3a:0d:2e:15:b2:b7:92:53:1d:8a:be:d5:ab:5c:
9d:c6:b2:f8:5e:32:06:f1:59:01:0a:f0:08:64:98:2d:f9:2c:
c8:60:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:10:42 2024 by rpki-client on console-ams.rpki-client.org